Auth bypass in IBM San Volume Controller Software
CVE-2012-6354
The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets.
Vulnerability class: Broken Authentication
EPSS: 0.020 (79.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm San_volume_controller_software — versions 6.1.0.0, 6.2.0.0, 6.3.0.0
- Ibm Storwize_v7000
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)